Fortinet NSE5_FSM-6.3 Exam Questions

Question 6 of 31

Refer to the exhibits.
Exam NSE5_FSM-6.3: Question 6 - Image 1

Three events are collected over a 10-minute time period from two servers: Server A and Server B.
Based on the settings for the rule subpattern, how many incidents will the servers generate?

Server A will generate one incident and Server B will generate one incident.

Server A will generate one incident and Server B will not generate any incidents.

Server B will generate one incident and Server A will not generate any incidents.

Server A will not generate any incidents and Server B will not generate any incidents.

Correct Answer: B

Question 7 of 31

An administrator is using SNMP and WMI credentials to discover a Windows device.
How will the WMI method handle this?

WMI method will collect only traffic and IIS logs.

WMI method will collect only DNS logs.

WMI method will collect only DHCP logs.

WMI method will collect security, application, and system events logs.

Correct Answer: D

Question 8 of 31

An administrator is in the process of renewing a FortiSIEM license.
Which two commands will provide the system ID? (Choose two.)

phgetHWID

./phLicenseTool -support

phgetUUID

./phLicenseTool -show

Correct Answer: A, C

Question 9 of 31

If a performance rule is triggered repeatedly due to high CPU use, what occurs in the incident table?

A new incident is created each time the rule is triggered, and the First Seen and Last Seen times are updated.

A new incident is created based on the Rule Frequency value, and the First Seen and Last Seen times are updated.

The Incident Count value increases, and the First Seen and Last Seen times update.

The incident status changes to Repeated, and the First Seen and Last Seen times are updated.

Correct Answer: C

Question 10 of 31

Refer to the exhibit.
Exam NSE5_FSM-6.3: Question 10 - Image 1

The FortiSIEM administrator is examining events for two devices to investigate an issue. However, the administrator is not getting any results from their search,
Based on the selected filters shown in the exhibit, why is the search returning no results?

Parenthesis are missing.

The wrong boolean operator is selected in the Next column.

The wrong option is selected in the Operator column.

An invalid IP subnet is typed in the Value column.

Correct Answer: B